Static task
static1
Behavioral task
behavioral1
Sample
ef582bb213bf240b3064aecf5be773f1493a7cb8c3137e700c975abf99fa8c40.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef582bb213bf240b3064aecf5be773f1493a7cb8c3137e700c975abf99fa8c40.exe
Resource
win10v2004-20220812-en
General
-
Target
ef582bb213bf240b3064aecf5be773f1493a7cb8c3137e700c975abf99fa8c40
-
Size
20KB
-
MD5
0b527e37f79d3327cfdefbf95f071e85
-
SHA1
a57821ecd12369708e4adb22a4162423dfe37335
-
SHA256
ef582bb213bf240b3064aecf5be773f1493a7cb8c3137e700c975abf99fa8c40
-
SHA512
77314d35954d62ffb6a438831dc9f2c3e88cfa65e6e6443af97dc2e9ed12df3501dac22446f130c060dfc057fda0038ecfc3d7be78b90102de57d85110d7323b
-
SSDEEP
384:3xsQd19Hkaub5NwK01SevI94p04rilZiJJhoZ4BwM:BT19HkJFNyEew94K4elgJOZ4WM
Malware Config
Signatures
Files
-
ef582bb213bf240b3064aecf5be773f1493a7cb8c3137e700c975abf99fa8c40.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE